Privacy Policy — 18 hibajee

18 hibajee collects personal information through several channels during your use of the platform. The categories of data collected, and the circumstances under which each is gathered, are described in full below. We collect only what is necessary for the legitimate purposes of operating a safe, compliant, and enjoyable betting and casino platform for players across Bangladesh.

Registration and Account Data

When you create a player account with 18 hibajee, you are required to provide the following information: your full legal name, date of birth, residential address (including city — for example, Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, or Mymensingh), email address, and mobile phone number. This information is used to create and administer your account, communicate with you about account matters, and carry out the identity and age verification required for responsible gaming compliance.

Identity Verification Documents

To comply with age verification and anti-money-laundering obligations, 18 hibajee may request copies of identity documents at any stage of your account lifecycle. Acceptable documents include Bangladesh National Identity Cards (NID), valid passports issued by Bangladeshi authorities, and other government-issued identity documents. Document images are processed securely and stored only for as long as required by applicable compliance obligations.

Financial and Transaction Data

When you make a deposit or request a withdrawal, 18 hibajee records the transaction details including the payment method used (such as bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, or BRAC Bank), the transaction amount in Bangladeshi Taka (৳), the transaction reference number, and the date and time of the transaction. Full payment credentials — such as mobile banking PINs or bank account passwords — are never stored by 18 hibajee. These are processed directly by the relevant payment provider over their own secure connection.

Usage and Behavioural Data

As you navigate the 18 hibajee platform, certain technical and behavioural data is collected automatically. This includes your IP address, device type, operating system, browser type and version, screen resolution, the pages or game sections you visit, the duration of your sessions, and the betting or gaming activity you undertake. This data is used to improve platform performance, detect fraud, monitor for problem gambling indicators, and generate aggregate analytics. It is not used to build individual advertising profiles.

Communications Data

If you contact the 18 hibajee support team via live chat, or send an email to [email protected], the content of those communications — along with your account identifier — is retained for a defined period. This data is used to resolve your query, improve support quality, and maintain an audit trail where required by our compliance obligations.

The personal data collected by 18 hibajee is used exclusively for the purposes described in this section. We do not use your data for any purpose that is incompatible with these stated uses without first obtaining your consent or establishing a separate lawful basis for doing so.

Marketing Communications

18 hibajee may send you promotional emails about bonuses, cricket season offers (such as BPL and IPL specials), Eid cashback promotions, and new game launches only if you have explicitly opted in to receive such communications during registration or through your account preferences. You may withdraw your consent and unsubscribe from marketing communications at any time by updating your account notification settings or by contacting the support team. Withdrawal of consent for marketing communications does not affect the lawfulness of any processing carried out prior to that withdrawal.

Automated Decision-Making

18 hibajee uses automated systems to detect certain types of prohibited behaviour — including fraud, bonus abuse, and patterns consistent with money laundering — as described in the Terms and Conditions. Where an automated system flags an account for review, the account may be temporarily suspended pending a manual review by the compliance team. You have the right to request human review of any decision made solely by an automated process that significantly affects you. Contact the support team via live chat to exercise this right.

18 hibajee does not sell, rent, or trade your personal data to any third party for their own commercial purposes. Personal data is shared only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

Game and Technology Providers

To deliver casino games and sports betting markets on the platform, 18 hibajee works with established game studios and technology providers including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming. These providers may receive technical identifiers (such as a session token or anonymised player ID) to facilitate game delivery. They are contractually prohibited from using this data for any purpose other than providing their services to 18 hibajee.

Payment Service Providers

To process your deposits and withdrawals, 18 hibajee shares the minimum necessary transaction data with the relevant payment provider — for example, bKash, Nagad, Rocket, Upay, or your chosen bank. The sharing of data with payment providers is governed by their own privacy policies and is strictly limited to what is required to execute the transaction.

Identity Verification Partners

18 hibajee uses third-party identity verification services to assist with the age verification and KYC (Know Your Customer) process. These partners receive copies of identity documents submitted by players for the sole purpose of conducting verification checks. They are not permitted to retain or reuse document data beyond the verification process.

Legal and Regulatory Disclosure

18 hibajee may be required to disclose personal data to regulatory bodies, law enforcement agencies, financial intelligence units, or courts of competent jurisdiction in Bangladesh or other applicable jurisdictions where we have a legal obligation to do so. This includes disclosures required in connection with anti-money-laundering investigations, fraud proceedings, or court orders. Where legally permissible, 18 hibajee will notify you of such a disclosure request before complying with it.

Business Transfers

In the event that 18 hibajee undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, personal data held by the platform may be transferred to the acquiring or successor entity as part of that transaction. In such circumstances, you will be notified of the change in data controller and any material changes to how your data is processed, and you will be given a reasonable opportunity to exercise your privacy rights before any transfer takes effect.

The 18 hibajee platform uses cookies and similar browser-based technologies to ensure the platform functions correctly, to keep your session secure, and to understand how players interact with different areas of the site. This section explains what cookies are, which categories we use, and how you can manage your cookie preferences.

What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits, remember your preferences, and maintain session continuity. Cookies do not contain executable code and cannot access other data stored on your device.

Categories of Cookies Used by 18 hibajee

Managing Your Cookie Preferences

You can manage or disable non-essential cookies through your browser settings. Most modern browsers — including Chrome, Firefox, Safari, and Edge — allow you to view, block, or delete cookies at any time. Please note that disabling strictly necessary or fraud prevention cookies will impair the functionality and security of the 18 hibajee platform and may prevent you from logging in or completing financial transactions.

Instructions for managing cookies in common browsers are available in each browser's official help documentation. 18 hibajee does not provide browser-specific instructions, as these change frequently with software updates.

18 hibajee applies a range of technical and organisational measures to protect personal data against unauthorised access, loss, destruction, or alteration. No method of electronic storage or internet transmission is entirely without risk, but we maintain standards appropriate to the sensitivity of the data we hold and the nature of the platform we operate.

Technical Security Measures

• All data transmitted between your device and the 18 hibajee platform is protected using TLS (Transport Layer Security) encryption, indicated by the HTTPS connection in your browser.
• Passwords are stored using one-way cryptographic hashing. 18 hibajee staff cannot view your password, and you will never be asked to provide it.
• Database access is restricted by role-based access controls. Only personnel with a verified operational need can access personal data categories.
• Identity documents submitted for verification are stored in an encrypted document management system and are accessible only to the compliance team.
• Platform infrastructure is monitored continuously for anomalous access patterns, with automated alerting and incident response procedures in place.

Data Retention Periods

18 hibajee retains personal data only for as long as is necessary for the purpose for which it was collected, or for as long as required by applicable legal or regulatory obligations. The following general retention guidelines apply:

• Account data (active accounts): Retained for the lifetime of the account and for a period of five years following account closure, in line with standard financial record-keeping obligations.
• Identity verification documents: Retained for five years from the date of submission or from the date of account closure, whichever is later, in accordance with anti-money-laundering record retention requirements.
• Transaction records: Retained for five years from the date of each transaction.
• Support communications: Retained for two years from the date of the last communication in a support thread.
• Analytics data: Aggregated and anonymised within twelve months of collection. Raw session logs are deleted after ninety days.

When the applicable retention period expires, personal data is securely deleted from active systems. Where immediate deletion is not technically feasible — for example, in backup archives — data is flagged for deletion at the next scheduled backup cycle and is not used for any operational purpose in the interim.

Data Breach Response

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected individuals, 18 hibajee will take immediate steps to contain the breach, assess its scope and severity, and notify affected players without undue delay. Notifications will be sent to the email address registered on the affected account. The support team will be available via live chat to answer questions from affected players throughout the response process.

As a player registered with 18 hibajee, you hold specific rights in relation to the personal data we process about you. These rights are described below. To exercise any of these rights, contact the support team via live chat or write to [email protected] — note that this email address is provided as plain text and is not a clickable link. We will respond to all valid requests within a reasonable timeframe and will not charge a fee for exercising your rights in normal circumstances.

Right of Access

You have the right to request a copy of the personal data that 18 hibajee holds about you. This includes account registration data, transaction records, identity verification status, support communication history, and any other data linked to your account. We will provide this information in a structured, commonly used format.

Right to Rectification

If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For standard account data such as your address or phone number, you may be able to update these directly through your account profile. For data that cannot be self-corrected — such as verified identity information — please contact support to initiate a correction request.

Right to Erasure

You may request that 18 hibajee delete the personal data we hold about you. This right is not absolute — we are required to retain certain categories of data for defined periods under our legal and regulatory obligations, as described in Section 5. Where deletion is possible, we will action your request promptly. Where data must be retained for legal reasons, we will explain the basis for retention clearly.

Right to Restriction of Processing

In certain circumstances — for example, while a dispute about the accuracy of your data is being resolved — you may request that we restrict our processing of your personal data to storage only. We will not carry out any further active processing of restricted data until the restriction is lifted.

Right to Data Portability

Where personal data has been provided by you and is processed on the basis of your consent or the performance of a contract, you have the right to receive that data in a structured, machine-readable format and to request that it be transferred to another data controller where technically feasible.

Right to Object

You have the right to object to the processing of your personal data where that processing is carried out on the basis of legitimate interest — in particular, processing for direct marketing purposes. Where you object to marketing communications, we will cease processing your data for that purpose immediately. Objections to other forms of legitimate interest processing will be assessed on a case-by-case basis.

The 18 hibajee platform integrates with a number of third-party service providers to deliver its full range of features. Each provider operates under its own privacy policy, which governs how data is processed within their systems. This section outlines the categories of third-party services used and the privacy implications of each.

Game Providers

Casino games on the 18 hibajee platform are delivered by international game studios including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming. When you launch a game, a secure game session is established between your browser and the provider's game server. The provider may log anonymised session data for game integrity and RNG audit purposes. 18 hibajee does not share your name, contact details, or payment data with game providers.

Payment Processors

Deposit and withdrawal transactions are processed by third-party payment infrastructure including bKash, Nagad, Rocket, Upay, and partner banks. The privacy practices of these providers — including how they handle your transaction data and mobile banking credentials — are governed by their own privacy policies and terms of service. 18 hibajee recommends reviewing the privacy documentation of your chosen payment provider if you have questions about how your financial data is processed on their side of the transaction.

Analytics and Performance Monitoring

18 hibajee uses internal analytics tools to monitor platform performance, identify technical errors, and understand aggregate user behaviour. Where third-party analytics libraries are used, they are configured to anonymise IP addresses and to prevent the sharing of identifiable data with the analytics provider. Raw identifiable usage data is not shared with third-party analytics platforms.

No Third-Party Advertising Networks

18 hibajee does not embed third-party advertising SDKs, retargeting pixels, or social media tracking scripts on the platform. You will not be tracked across other websites based on your activity on 18 hibajee. The platform does not participate in real-time bidding advertising ecosystems.

18 hibajee reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform operations. When material changes are made to this policy, we will notify registered players by email to the address held on your account, and we will update the effective date displayed at the top of this page.

What Counts as a Material Change

A material change is any amendment that meaningfully affects how your personal data is collected, used, or shared — for example, introducing a new category of data collection, changing the legal basis for a processing activity, or adding a new category of third-party recipient. Non-material changes such as corrections of typographical errors, clarifications of existing language, or restructuring of the document for readability do not trigger an active notification, though the effective date will still be updated.

Your Continued Use of the Platform

By continuing to use the 18 hibajee platform after a revised Privacy Policy has been published and the notification period has elapsed, you acknowledge that you have read the updated policy. If you do not agree with any changes made to this policy, you have the right to close your account and request deletion of your personal data, subject to the retention obligations described in Section 5. To initiate account closure, contact the support team via live chat.

Previous Versions

Previous versions of the 18 hibajee Privacy Policy are retained on file by the compliance team. If you require a copy of a previous version — for example, in connection with a dispute about data processing that occurred under an earlier version of the policy — you may request it by contacting support. The support team will provide the relevant historical version within a reasonable timeframe.

Contact and Queries

If you have any questions about this Privacy Policy, about how 18 hibajee processes your personal data, or about how to exercise your privacy rights, the support team is available 24 hours a day, 7 days a week via live chat on the platform. You may also write to the team at the following address, which is provided as plain text only:

[email protected]

Response times are typically within one business day. During major cricket events such as BPL, IPL, or ICC T20 World Cup fixtures, response times may be slightly longer. All privacy-related queries are treated as priority communications and are handled by the compliance team directly.